Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8AHzZY53KQrdqWEWn8dYu1boQnKh9vf9BeR4mnbNE8NS/0/3138392e39302e32382e302f32322d3332203d3e20323632383334.roa
File:                     3138392e39302e32382e302f32322d3332203d3e20323632383334.roa (raw, json)
Hash identifier:          L+tfe9pQxZQd/Y6KVA7n1IB/T5/Jk+cT3in4esS2zwo=
Subject key identifier:   B5:AE:AB:BF:C5:69:C2:99:5C:83:3D:EC:A0:08:8C:27:CE:70:31:D8
Certificate issuer:       /CN=5002EE56B40431CA262F59717A16E5A8812286A5
Certificate serial:       3E0DEF2CB1AE7A0D1C5BF183E38D1F6421D71138
Authority key identifier: 50:02:EE:56:B4:04:31:CA:26:2F:59:71:7A:16:E5:A8:81:22:86:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5002EE56B40431CA262F59717A16E5A8812286A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8AHzZY53KQrdqWEWn8dYu1boQnKh9vf9BeR4mnbNE8NS/0/3138392e39302e32382e302f32322d3332203d3e20323632383334.roa
Signing time:             Thu 07 Aug 2025 13:53:38 +0000
ROA not before:           Thu 07 Aug 2025 13:48:38 +0000
ROA not after:            Thu 06 Aug 2026 13:53:38 +0000
asID:                     262834
IP address blocks:        189.90.28.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8AHzZY53KQrdqWEWn8dYu1boQnKh9vf9BeR4mnbNE8NS/0/5002EE56B40431CA262F59717A16E5A8812286A5.crl
                          rsync://rpki-repo.registro.br/repo/8AHzZY53KQrdqWEWn8dYu1boQnKh9vf9BeR4mnbNE8NS/0/5002EE56B40431CA262F59717A16E5A8812286A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5002EE56B40431CA262F59717A16E5A8812286A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 05:21:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:0d:ef:2c:b1:ae:7a:0d:1c:5b:f1:83:e3:8d:1f:64:21:d7:11:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5002EE56B40431CA262F59717A16E5A8812286A5
        Validity
            Not Before: Aug  7 13:48:38 2025 GMT
            Not After : Aug  6 13:53:38 2026 GMT
        Subject: CN=B5AEABBFC569C2995C833DECA0088C27CE7031D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4c:8e:e0:bd:80:ab:62:9d:24:0a:a6:66:e3:
                    b5:6f:dc:1e:70:e7:95:12:48:b9:89:08:be:a1:bc:
                    4c:5e:d7:62:3a:99:b3:01:d0:45:ae:dd:72:8c:4b:
                    13:e7:51:fb:32:3a:98:0e:d7:20:32:38:13:cf:1b:
                    35:e2:69:ef:f3:f4:31:d1:25:b1:4c:7d:b0:ef:69:
                    cf:84:a6:7a:0c:75:12:cf:21:d4:22:3b:8e:ed:75:
                    ab:97:a0:5a:3a:c5:e5:c5:f2:39:03:48:5d:c9:ee:
                    37:93:f4:da:48:ef:05:1d:b8:51:ad:32:71:90:a0:
                    c4:bd:e6:0e:59:40:84:cf:78:79:9e:c7:d3:63:8e:
                    91:93:d4:9d:23:eb:37:da:5a:82:60:39:71:34:91:
                    0e:5e:09:df:48:88:4c:2f:ac:e3:40:a7:80:2a:ac:
                    75:84:cf:51:35:14:ed:6d:33:b1:34:16:c7:43:a9:
                    f1:70:b8:6f:86:46:4a:db:a6:24:e8:33:a6:75:68:
                    94:1d:65:a1:ac:58:43:1b:10:77:fd:ca:db:35:3f:
                    56:92:22:b7:86:fc:8f:0a:a8:2d:13:0b:2b:81:4b:
                    46:f6:3b:1f:b7:6e:e9:4c:9c:79:68:7f:1f:ac:8d:
                    7a:53:3c:19:6b:f1:b7:a7:1b:82:fc:0b:39:0a:cb:
                    c7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:AE:AB:BF:C5:69:C2:99:5C:83:3D:EC:A0:08:8C:27:CE:70:31:D8
            X509v3 Authority Key Identifier:
                keyid:50:02:EE:56:B4:04:31:CA:26:2F:59:71:7A:16:E5:A8:81:22:86:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8AHzZY53KQrdqWEWn8dYu1boQnKh9vf9BeR4mnbNE8NS/0/5002EE56B40431CA262F59717A16E5A8812286A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5002EE56B40431CA262F59717A16E5A8812286A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8AHzZY53KQrdqWEWn8dYu1boQnKh9vf9BeR4mnbNE8NS/0/3138392e39302e32382e302f32322d3332203d3e20323632383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ad:34:ca:91:6c:cc:c7:16:c1:86:cb:ac:70:ba:6a:53:e0:86:
         48:c5:a9:06:b0:c8:51:7c:a3:d6:df:7b:d8:9d:9e:28:82:26:
         ad:9c:96:14:2e:c9:59:c0:cd:74:8b:a7:d7:05:4a:a3:49:d8:
         09:84:37:54:86:b2:54:57:70:16:d5:6d:d8:a7:88:f7:b7:ae:
         8f:64:33:d6:b2:1a:dc:80:d5:ad:c7:7e:ac:3f:99:71:1d:00:
         6d:bc:94:19:3a:19:4a:ab:ec:0a:13:73:43:ec:f6:e4:7d:44:
         28:a2:5c:db:a7:53:54:d0:14:a1:e4:1d:1a:99:31:3c:83:fb:
         29:e7:4e:ce:16:40:8d:31:c9:33:f5:3a:db:b3:14:69:02:2f:
         d4:62:50:6c:d3:1c:40:6c:8b:b4:cd:a6:fd:6b:13:17:8e:e0:
         68:f8:2d:4d:f5:6d:9f:c0:06:a4:e1:29:f9:0b:be:3e:1d:83:
         32:e1:69:d8:f3:bb:6c:33:34:d7:10:37:e0:50:aa:eb:8a:03:
         3c:d0:ed:13:1b:75:5d:95:34:68:59:33:cd:f7:14:a4:85:b8:
         01:d8:c6:74:db:30:57:eb:87:54:d6:20:8f:6c:95:a2:87:76:
         89:8d:9b:97:f0:5a:75:4c:a5:5a:6a:bb:47:c1:a4:5a:cf:eb:
         4b:01:e2:cf
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUPg3vLLGueg0cW/GD440fZCHXETgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTAwMkVFNTZCNDA0MzFDQTI2MkY1OTcxN0ExNkU1QTg4
MTIyODZBNTAeFw0yNTA4MDcxMzQ4MzhaFw0yNjA4MDYxMzUzMzhaMDMxMTAvBgNV
BAMTKEI1QUVBQkJGQzU2OUMyOTk1QzgzM0RFQ0EwMDg4QzI3Q0U3MDMxRDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0TI7gvYCrYp0kCqZm47Vv3B5w
55USSLmJCL6hvExe12I6mbMB0EWu3XKMSxPnUfsyOpgO1yAyOBPPGzXiae/z9DHR
JbFMfbDvac+EpnoMdRLPIdQiO47tdauXoFo6xeXF8jkDSF3J7jeT9NpI7wUduFGt
MnGQoMS95g5ZQITPeHmex9NjjpGT1J0j6zfaWoJgOXE0kQ5eCd9IiEwvrONAp4Aq
rHWEz1E1FO1tM7E0FsdDqfFwuG+GRkrbpiToM6Z1aJQdZaGsWEMbEHf9yts1P1aS
IreG/I8KqC0TCyuBS0b2Ox+3bulMnHlofx+sjXpTPBlr8benG4L8CzkKy8fzAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUta6rv8Vpwplcgz3soAiMJ85wMdgwHwYDVR0j
BBgwFoAUUALuVrQEMcomL1lxehblqIEihqUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEFIelpZNTNLUXJkcVdFV244ZFl1MWJvUW5LaDl2ZjlCZVI0bW5iTkU4
TlMvMC81MDAyRUU1NkI0MDQzMUNBMjYyRjU5NzE3QTE2RTVBODgxMjI4NkE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUwMDJFRTU2QjQwNDMxQ0Ey
NjJGNTk3MTdBMTZFNUE4ODEyMjg2QTUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhBSHpaWTUzS1FyZHFXRVduOGRZdTFib1FuS2g5dmY5QmVSNG1uYk5FOE5TLzAv
MzEzODM5MmUzOTMwMmUzMjM4MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNjMy
MzgzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCvVocMA0GCSqGSIb3DQEBCwUAA4IBAQCtNMqRbMzH
FsGGy6xwumpT4IZIxakGsMhRfKPW33vYnZ4ogiatnJYULslZwM10i6fXBUqjSdgJ
hDdUhrJUV3AW1W3Yp4j3t66PZDPWshrcgNWtx36sP5lxHQBtvJQZOhlKq+wKE3ND
7PbkfUQoolzbp1NU0BSh5B0amTE8g/sp507OFkCNMckz9TrbsxRpAi/UYlBs0xxA
bIu0zab9axMXjuBo+C1N9W2fwAak4Sn5C74+HYMy4WnY87tsMzTXEDfgUKrrigM8
0O0TG3VdlTRoWTPN9xSkhbgB2MZ02zBX64dU1iCPbJWih3aJjZuX8Fp1TKVaartH
waRaz+tLAeLP
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:38:41 2025 by rpki-client